Google Professional Cloud Network Engineer — Study Guide
Practice as you learn. Every concept maps to real exam questions with verified answers in the Google exam hub, or drill the full exam with timed practice on ExamRoll.io.
This guide covers each PCNE domain in depth. Pick a domain to go deep, or work through them in order.
The domains
- VPC Architecture, Subnets and Address Planning — A Virtual Private Cloud (VPC) is a global, logically isolated network that spans all Google Cloud regions. Subnets are regional constructs within a
- Firewall Policy, Cloud Armor and Network Security — - Direction and implied rules: - Ingress is evaluated against traffic entering a VM NIC; egress against traffic leaving it. - Two implied rules exist
- Hybrid Connectivity, Cloud Router and BGP — - Cloud Router and BGP - Cloud Router is a regional control-plane service that establishes BGP sessions with VPN tunnels or Interconnect VLAN
- Load Balancing, Cloud CDN and Global Traffic Management — This section explains how Google Cloud Load Balancing, Cloud CDN, and global traffic management work together to deliver resilient, performant, and
- Cloud DNS, Service Discovery and Hybrid Name Resolution — Cloud DNS is Google Cloud’s scalable, highly available DNS service that supports both public authoritative zones and private DNS for VPCs. It also
- Private Connectivity to Google and Managed Services — Design success hinges on three decisions: - Which private access mechanism matches the service and security model (PGA vs PSC for Google APIs, PSA vs
- Routing, Network Connectivity Center and Segmentation — This section explains routing, Network Connectivity Center (NCC), and segmentation patterns in Google Cloud. It focuses on how routes are created and
- GKE, Containers and Application Networking — Google Kubernetes Engine (GKE) integrates tightly with Google Cloud networking. Designing for reliability and security requires understanding
- Network Observability, Reliability and Troubleshooting — Network observability on Google Cloud is the disciplined collection, correlation, and analysis of network signals that describe reachability,
- Network Automation, Governance and Cost Operations — - IAM and least privilege - Separate network administration from security administration. Compute Network Admin grants full control over networking
Ready to practice?
- Browse every question with verified answers → — free, with explanations.
- Start timed practice tests on ExamRoll.io → — the full question bank, in 20+ languages.
Pass the whole exam — not just this question
You found this answer. Get every verified question and explanation in one place, and save hours of prep. Free to start.
Pass your exam →